CVE-2010-3850: Low severity linux kernel vulnerability
Last updated 24 July 2024
Other sources
The ecdevioctl function in net/econet/afeconet.c in the Linux kernel before 2.6.36.2 does not require the CAPNETADMIN capability, which allows local users to bypass intended access restrictions and configure econet addresses via an SIOCSIFADDR ioctl call.
— Launchpad
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3850?
CVE-2010-3850 is considered a moderate severity vulnerability due to the potential for local users to bypass access restrictions.
How do I fix CVE-2010-3850?
To fix CVE-2010-3850, update the Linux kernel to version 2.6.36.2 or later to ensure the CAP_NET_ADMIN capability is required.
What systems are affected by CVE-2010-3850?
CVE-2010-3850 affects multiple versions of the Linux kernel, including those used by Debian, SUSE, and Ubuntu distributions prior to the specified versions.
What does CVE-2010-3850 allow an attacker to do?
CVE-2010-3850 allows a local user to configure econet addresses without proper access restrictions, potentially leading to network misconfigurations.
Is CVE-2010-3850 a local or remote vulnerability?
CVE-2010-3850 is a local vulnerability, which can only be exploited by authenticated users on the affected system.